How to check if kerberos is being used.
Gerald (Jerry) Carter
jerry at samba.org
Tue Jul 6 19:30:28 GMT 2004
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Benoit Panizzon wrote:
| Does winbind/samba do kerberos all by itself if
| hitting a ADS Native Mode or do you have to configure
| it to do so? (win2k clients use it without any config,
| so that should be possible)
winbindd will use kerberos for its own domain assuming you
have set 'security = ads'. It will also use kerberos in
the session setup to any DC's in a trusted native mode domain
(but not mixed mode).
| How can I check if kerberos is being used or if winbind did
| fallback to NT4 RPC mode?
level 10 debug log or ethereal trace.
| Are there any benefits of using kerberos at all (as
| it apparently works on my config without specifying anything).
krb5 is necessary for supporting the AD transtivei trusts.
- --
cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard ------------------------- http://www.hp.com
SAMBA Team ---------------------- http://www.samba.org
GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." ----------- Sting
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6v3UIR7qMdg1EfYRAkveAKDJ1Yk1REYm1fmjwCRMT7shw+n0egCfSOlU
D4M8VblZYAtS2nXaaw3/I5U=
=qTLR
-----END PGP SIGNATURE-----
More information about the samba-technical
mailing list